Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: 4U9G7eZtnxDxQBrqfw+tF6BKfnS6ILHX1nK35TZ/SrI=
Subject key identifier: AA:98:10:6D:E5:B9:88:5F:C7:76:1B:3A:81:34:EF:78:16:D6:AD:2B
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 0199FC8F3C65F515FA571E3AD8C479A8D57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 08EF
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: qj4LxoTPqZ8YHzCmJ7U1KpQG6O/6aYvLocsII+kUSv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3c:65:f5:15:fa:57:1e:3a:d8:c4:79:a8:d5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=aa98106de5b9885fc7761b3a8134ef7816d6ad2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:e5:7c:9c:e5:ab:2c:6b:1f:3e:13:08:3d:
f5:1d:05:a8:ef:f8:c0:c4:5b:b0:d5:80:1a:c3:de:
ec:7e:4f:30:23:07:e8:55:f8:3c:ea:b9:bd:5f:b3:
af:2e:5e:27:b8:64:f4:35:a0:fb:5e:cf:8f:5d:24:
70:7f:96:8f:df:36:08:69:1c:da:f1:3e:6c:2b:e0:
cd:f3:70:7e:6d:19:e9:88:8a:46:66:83:31:ac:69:
dd:6c:8b:4a:7e:97:cd:41:ee:4e:02:d4:40:06:06:
b2:ad:95:27:83:b4:a4:8a:b7:55:da:3b:4d:2c:bb:
11:93:48:5d:0e:83:ad:07:ed:92:2b:84:5c:67:22:
3e:98:d9:6d:30:5a:68:5d:9f:40:cb:1d:97:43:32:
5a:18:17:10:77:86:90:74:de:a5:9d:c3:87:73:3b:
6a:69:25:20:04:8c:2f:ce:b1:71:a2:a9:e3:ce:c6:
e3:1f:bf:b6:fe:27:31:75:c1:d4:00:c3:ba:75:5f:
ca:69:38:fc:3f:07:df:e0:ef:71:11:4f:47:5b:34:
22:df:d2:5d:30:70:86:49:c8:3f:11:4f:ec:51:02:
0b:01:3d:eb:f7:6f:3e:fe:3b:9c:8b:83:19:c1:58:
62:0b:0f:d4:77:e8:8d:5a:06:9b:3f:48:dc:53:5a:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:98:10:6D:E5:B9:88:5F:C7:76:1B:3A:81:34:EF:78:16:D6:AD:2B
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:79:8b:f8:c1:84:71:f8:3a:8d:22:58:3a:d0:ba:cf:ae:a6:
2a:8b:a7:43:66:51:13:83:7d:d4:7a:7d:c2:49:fb:a0:ea:7a:
73:69:34:b0:fe:c0:79:c4:50:66:8f:4f:c1:1b:86:82:ad:b4:
46:62:a9:e8:fe:46:e3:77:90:3b:7d:43:63:f5:ae:54:a6:3b:
af:e5:9c:47:de:25:e5:ff:9a:e6:fb:b8:1f:b5:00:29:40:54:
a2:e9:c9:db:6e:f0:04:76:6a:bd:d7:a7:d5:47:8a:32:05:70:
a3:ce:fd:8e:2a:96:58:df:c7:c8:21:97:c2:a0:e1:03:31:9d:
d9:3b:03:70:35:b7:55:2b:c3:84:d7:ca:bc:d8:c2:86:4e:e0:
6b:17:ef:87:2a:55:29:cd:ff:ec:0c:f6:f0:52:6e:c1:25:df:
bb:73:18:3f:38:7b:1f:93:41:2e:f1:7f:79:73:dd:7d:4b:21:
18:b6:7e:02:33:8e:e7:ce:77:e6:68:9b:79:33:7d:82:ae:ff:
71:cf:91:76:fe:a8:46:cd:98:64:92:fd:ee:c5:d2:72:2e:33:
46:65:6c:33:be:e4:19:ed:b3:f9:bc:f8:c5:9e:09:47:a1:3a:
ee:4c:39:d2:7a:4b:ba:b3:1b:7f:57:26:d7:83:d9:60:4d:da:
05:af:da:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzxl9RX6Vx462MR5qNV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2U0MmExNDZiOTBiYTdjZDMzMWFkNmExM2VlZjFkYTJm
YmE0NDAwHhcNMjUxMDE5MTMwMTA5WhcNMjUxMDIwMTMwMTA5WjAzMTEwLwYDVQQD
EyhhYTk4MTA2ZGU1Yjk4ODVmYzc3NjFiM2E4MTM0ZWY3ODE2ZDZhZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDDlfJzlqyxrHz4TCD31HQWo7/jA
xFuw1YAaw97sfk8wIwfoVfg86rm9X7OvLl4nuGT0NaD7Xs+PXSRwf5aP3zYIaRza
8T5sK+DN83B+bRnpiIpGZoMxrGndbItKfpfNQe5OAtRABgayrZUng7SkirdV2jtN
LLsRk0hdDoOtB+2SK4RcZyI+mNltMFpoXZ9Ayx2XQzJaGBcQd4aQdN6lncOHcztq
aSUgBIwvzrFxoqnjzsbjH7+2/icxdcHUAMO6dV/KaTj8Pwff4O9xEU9HWzQi39Jd
MHCGScg/EU/sUQILAT3r928+/juci4MZwVhiCw/Ud+iNWgabP0jcU1rAPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqYEG3luYhfx3YbOoE073gW1q0rMB8GA1UdIwQY
MBaAFON+QqFGuQunzTMa1qE+7x2i+6RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZWNlNzYtMDU3NS00NmIxLTk0YmYt
MDYzMjlmNmUwNDc1LzEvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zZWNlNzYtMDU3NS00NmIxLTk0YmYtMDYzMjlmNmUwNDc1
LzEvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA53mL+MGE
cfg6jSJYOtC6z66mKounQ2ZRE4N91Hp9wkn7oOp6c2k0sP7AecRQZo9PwRuGgq20
RmKp6P5G43eQO31DY/WuVKY7r+WcR94l5f+a5vu4H7UAKUBUounJ227wBHZqvden
1UeKMgVwo879jiqWWN/HyCGXwqDhAzGd2TsDcDW3VSvDhNfKvNjChk7gaxfvhypV
Kc3/7Az28FJuwSXfu3MYPzh7H5NBLvF/eXPdfUshGLZ+AjOO58535mibeTN9gq7/
cc+Rdv6oRs2YZJL97sXSci4zRmVsM77kGe2z+bz4xZ4JR6E67kw50npLurMbf1cm
14PZYE3aBa/aGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:32 2025 by rpki-client